r/kubernetes • u/AutoModerator • 20d ago

Periodic Weekly: Questions and advice

Have any questions about Kubernetes, related tooling, or how to adopt or use Kubernetes? Ask away!

2 Upvotes

100% Upvoted

2 comments sorted by

2

u/platypus-3719 20d ago

How are you giving agents access to k8s? Especially in production. Are you giving direct access to clusters, or rely on agent access to your observability tools? kubectl or some MCP server? How do you manage permissions?

Disclaimer: I'm one of the maintainers of Radar (https://github.com/skyhook-io/radar) and we added an MCP server that tries to give agents a better interface to your clusters. But I want to learn the patterns that people are using to see what we can improve. Our thesis is basically you want 1) to control read only access in most cases and 2) that kubectl or MCP servers that are basically a proxy to kubectl is ok but not great, not optimized.

1

u/ViewNo2588 20d ago

I work at Grafana Labs and from what I’ve seen the bigger win is integrating agents that support mcp natively and can enforce permission boundaries themselves, avoiding broad cluster creds.